Skip to content
OpenAdvisories

Weakness (CWE)

CWE-416: Use After Free

Variant

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Choose a language that provides automatic memory management.

  2. Implementation

    When freeing pointers, be sure to set them to NULL once they are freed. However, the utilization of multiple or complex data structures may lower the usefulness of this strategy.

Source: MITRE CWE-416

All Critical High Medium Low Exploited only Public exploit

6,546 results · Feed

  • Unscored —
    CVE-2018-17656

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17691

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.…

    Foxit PhantomPDF
  • Unscored —
    CVE-2018-17683

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17646

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17698

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.…

    Foxit PhantomPDF
  • Unscored —
    CVE-2018-17629

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17630

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17637

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17657

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17694

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.…

    Foxit PhantomPDF
  • Unscored —
    CVE-2018-17653

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17688

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.…

    Foxit PhantomPDF
  • Unscored —
    CVE-2018-17638

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17663

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17682

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17664

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17678

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17625

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17668

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17636

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17669

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17627

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17665

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17639

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17626

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17652

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17644

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-17632

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.…

    Foxit Reader
  • Unscored —
    CVE-2018-19017

    Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing…

    ICS-CERT CX-Supervisor
  • High 7.8
    CVE-2018-15982 Exploited · Ransomware Public exploit EPSS 90%

    Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successfu…

    flashplugin-nonfree Ubuntu
    KEV Feb 15, 2022
  • Medium 6.1
    CVE-2018-16882

    A use-after-free issue was found in the way the Linux kernel's KVM hypervisor processed posted interrupts when nested(=…

    The Linux Foundation Kernel linux-raspi2 linux-hwe Debian Ubuntu
  • Medium 5.5
    CVE-2018-20623

    In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archi…

    binutils binutils Debian Ubuntu
  • Medium 6.5
    CVE-2018-16884

    A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the s…

    [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu
  • Unscored —
    CVE-2018-18989

    In CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior), when…

  • Medium 5.7
    CVE-2018-16841

    Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When config…

    [UNKNOWN] samba samba samba Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-17909

    When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it i…

    Omron CX-Supervisor ICS / OT
  • Medium 4.3
    CVE-2018-16840

    A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy…

    The curl Project curl curl curl Debian Alpine
  • Unscored —
    CVE-2018-17616

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-17617

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader
  • Unscored —
    CVE-2018-17620

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.…

    Foxit Foxit Reader